log {azure-security-center | azure-security-center2} setting

Use this command to connect and configure logging to the Azure Security Center service.

You must have an active Azure Security Center account to provide the data needed to configure these settings.

The exact same entries can be found under the azure-security-center2 setting command.

config log azure-security-center setting
    set status {enable | disable}   Enable Azure Security Center logging.
    set appliance-id {string}   Appliance ID. size[128]
    set policy-saskey {string}   Policy saskey. size[128]
    set policy-name {string}   Policy name. size[128]
    set eventhub-name {string}   Event hub name. size[128]
    set servicebus-namespace {string}   Service bus namespace. size[128]
    config custom-field-name
        edit {id}
        # Custom field name for CEF format logging.
            set id {integer}   Entry ID. range[0-255]
            set name {string}   Field name. size[35]
            set custom {string}   Field custom name. size[35]
        next
end

Due to Azure Security Center retiring its firewall solution integration, this feature is no longer supported. See Retirement of Security Center features (July 2019). For a replacement integration, see Azure Sentinel.